Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: lFIHY6gdPrE2igm20bPhB4L3JIHFqJepuJ+SaobG6IU=
Subject key identifier: 06:BF:A0:A9:57:E1:8C:F7:1C:8B:7D:E4:0D:B1:CC:00:A1:12:31:27
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0198959214B62FE3275637ED8380B61EF38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 20:00:35 +0000
Manifest this update: Sun 10 Aug 2025 20:00:35 +0000
Manifest next update: Mon 11 Aug 2025 20:00:35 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: HEbGf4fqZf3k9PBWZ/RZ5UP9ID9IlR00BYVD/cYJowc=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:14:b6:2f:e3:27:56:37:ed:83:80:b6:1e:f3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Aug 10 20:00:35 2025 GMT
Not After : Aug 11 20:00:35 2025 GMT
Subject: CN=06bfa0a957e18cf71c8b7de40db1cc00a1123127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:6e:f5:8c:2d:62:3a:58:78:97:9c:df:eb:
21:fc:f5:17:28:8f:67:75:7a:67:0e:94:cb:3c:53:
8b:79:05:bb:ae:81:26:56:0a:9e:84:f7:d0:df:31:
2d:0c:14:4b:56:51:48:56:f1:00:0c:16:b8:de:5e:
9e:2f:df:2d:b5:61:e3:0b:1f:ce:5b:b1:1e:6f:da:
03:5a:e5:c0:98:72:48:23:8a:07:36:23:21:20:38:
4f:d1:af:76:9a:20:5f:97:38:3c:b3:ca:49:a6:46:
9e:80:56:fb:90:f9:6f:52:d2:e6:4e:8e:79:fe:f2:
27:25:b3:ca:09:ff:1c:d3:a2:6c:48:39:d1:b7:65:
fe:a8:ed:a6:2d:dc:98:74:ff:8e:81:30:dd:06:f7:
ec:02:4a:8c:9e:74:19:82:4a:a2:4b:1f:12:6a:b4:
76:46:a7:51:e3:5e:15:d6:d9:bb:24:99:08:21:11:
c8:64:3b:7e:ad:78:90:9b:57:42:c0:99:66:42:c6:
5e:a7:00:36:a9:b7:b9:57:f1:f8:bf:73:e9:8e:6d:
de:8f:ee:6d:2b:5e:79:18:fc:f6:bb:56:76:50:12:
9a:2f:ee:0d:3f:59:6b:b3:99:97:cf:82:ba:b0:23:
da:b7:c5:6e:f3:ee:0c:d4:c0:7a:cb:02:e9:46:05:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:A0:A9:57:E1:8C:F7:1C:8B:7D:E4:0D:B1:CC:00:A1:12:31:27
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dc:25:14:1e:5f:12:a1:84:2e:fd:49:7e:89:fa:aa:30:87:
7e:b8:ab:56:9f:4c:f8:70:75:d7:40:1b:4e:91:60:57:09:04:
1e:91:a4:06:e4:be:35:91:90:b5:81:18:7b:52:53:df:ee:bc:
b7:98:fb:16:b4:1e:78:26:56:4e:c6:3d:4d:ba:14:2e:2a:86:
0f:6e:03:50:e8:f1:25:3f:b9:9d:89:fc:a4:dd:c2:57:df:6a:
32:5c:63:24:51:f5:f9:7b:69:31:a0:ca:c3:53:3e:2a:d3:2c:
37:a6:62:7d:e1:36:8f:dc:c6:1c:a6:d9:78:4e:1f:5c:55:5a:
75:90:ab:5b:5e:8e:6f:60:66:ad:11:de:b7:20:a1:9f:31:63:
00:fd:b9:18:9d:bc:ea:fc:66:46:eb:13:1f:3e:39:7f:3f:5f:
ae:95:ad:dd:8c:48:e5:cf:bd:e6:2b:89:4e:b6:53:af:e2:71:
72:07:83:49:0d:c0:f1:36:79:b5:fb:93:99:c9:fe:1d:67:65:
4b:19:87:6e:d3:b7:69:1b:f7:4f:0b:16:44:90:cf:0a:90:b5:
c8:95:20:58:2b:01:17:3d:36:00:77:9a:29:3c:ab:d0:1a:a6:
c6:ce:f4:16:40:dd:35:5a:1b:72:d0:5a:06:e2:30:04:a0:c3:
e1:08:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:25 2025 by rpki-client